path "secret*" {
capabilities = ["read"]
}
